We respect your privacy
Statement on the Collection and Use of Personal Data
Pelago excursions d.o.o. is committed to protecting customers' personal data by collecting only the necessary basic information required to fulfill our obligations. We inform customers about how their data is used, regularly provide them with options regarding the use of their data, including the ability to opt-out of marketing lists. All customer data is strictly protected and accessible only to employees who need it for their work. All employees of Pelago excursions d.o.o. and business partners are responsible for upholding privacy protection principles.
We respect your privacy, whether you are using our services or simply inquiring about them.
You have the right to protection of your personal data: name, address, phone number, email address, and other information that could directly or indirectly identify you with reasonable effort.
This statement describes the process of collecting your personal data, the purposes for which it is collected, how it is used, who it is shared with, how it is protected, and what your options are regarding data protection.
This statement applies to the processing of your personal data on this website, marketing campaigns that may lead you to this website, sponsored social media posts, and similar services managed by us or a third party on our behalf.
Who is responsible for processing your personal data?
Danijel Karlović and Matteo Usich
Pelago excursions d.o.o.
Franje Iskre 4
52210 Rovinj, Croatia
OIB: 46987864949
Contact:
[email protected]
+385 95 3896986
Who can you contact regarding personal data inquiries or requests?
For any questions, requests, or complaints regarding this statement or to exercise your rights under this statement, you can contact us via the email address provided in the statement header.
Core Principles
We appreciate the trust you place in us by sharing your personal data, and we commit to processing it in a fair, transparent, and secure manner. The key principles we adhere to when processing personal data are as follows:
- Legality: We will collect personal data in a fair, lawful, and transparent manner.
- Data Minimization: We will limit the collection of personal data to what is appropriate and necessary for the intended purpose.
- Purpose Limitation: We will collect personal data only for specific, explicit, and legitimate purposes and will not process it in a way that is inconsistent with those purposes.
- Accuracy: We will ensure the accuracy and timeliness of personal data.
- Security and Protection of Personal Data: We will implement technical and organizational measures to ensure adequate data protection levels, preventing unauthorized access, accidental or intentional destruction, or loss.
- Access and Corrections: We will process your personal data while respecting your rights.
- Storage Limitation: Your personal data will be stored in accordance with applicable data protection laws and only as long as necessary to achieve the intended purpose.
- International Transfers Protection: If your personal data is transferred outside the European Economic Area, we will ensure that it is adequately protected.
- Third-Party Data Protection: We will ensure that any sharing of personal data with third parties is conducted under applicable laws and with appropriate contractual protection measures.
What data do we collect and on what legal basis?
You will always be clearly informed about which personal data we collect. This information will be provided with a separate privacy notice included in specific services (including communication services), newsletters, reminders, surveys, offers, event invitations, etc.
Under applicable data protection laws, we may process your personal data if:
- You have given consent for specific processing purposes (as specified in the privacy notice related to that processing). You have the right to withdraw consent at any time without providing a reason; or
- Processing is necessary to fulfill a contract to which you are a party; or
- Processing is required to pursue legitimate interests, such as preventing fraud, determining warranty rights, or checking customer satisfaction. You will be informed of these legitimate interests in the related privacy notice; or
- Processing is necessary to fulfill our legal obligations, such as processing purchase-related data including name, address, VAT ID, product details, and transaction circumstances.
For what purposes do we process your personal data?
We process personal data for specific, explicitly confirmed, and legitimate purposes and will not process them in a manner inconsistent with these purposes.
Such purposes may include fulfilling your order, improving your website experience, enhancing products and services, providing service offers, conducting marketing communications, and more. Each processing purpose is clearly defined in a related privacy notice, which is available on the website, in orders, registration forms, newsletters, etc.
Certain information (such as the product categories you purchase) may be used to determine content most relevant and useful to you. This enables us to present the most appropriate product or service offers. Individuals may be categorized into different groups (profiles) for personalized communication.
Ensuring Data Accuracy and Updates
It is important that your data remains accurate and up to date. Please inform us of any changes or errors by contacting our support email. We will take reasonable measures to correct or delete any inaccurate or outdated personal data.
Access to Your Personal Data
You have the right to access the personal data we process, and if the data is inaccurate or incomplete, you may request correction or deletion. If you need information regarding your privacy rights, please contact us via the provided email address.
How Long Do We Store Your Personal Data?
We store your personal data in accordance with applicable data protection regulations.
Your personal data is stored only as long as necessary for the intended processing purpose, as required by law (e.g., 10 years for issued invoices) or to fulfill contractual obligations, including warranty claims (e.g., 5 years after contractual obligations have been fulfilled).
Protecting Your Personal Data
We implement technical and organizational security measures to protect your personal data from illegal or unauthorized access, accidental loss, or destruction. These measures consider our IT infrastructure, potential privacy impacts, and costs, in compliance with current data protection standards and practices.
Use of Cookies and Similar Technologies
Our website uses cookies to enhance your browsing experience and improve our website. For more information on our use of cookies and how you can opt out, please read our Cookie Policy.
Data Sharing
In accordance with the purpose of data collection, we may share your personal data with the following categories of recipients:
- Within our organization and service brands, including authorized representatives and sales networks.
- Business partners such as advertising agencies, marketing firms, and PR agencies assisting in executing campaigns and promotional activities.
- Legal entities such as IT service providers, accounting firms, law firms, and more.
- Public authorities or regulatory bodies when required by law, court orders, or legal procedures.
Use of Social Media
If you log in to our website using a social media account (e.g., Facebook), we will collect only the personal data necessary to set up your account, such as your name, email address, phone number, and mailing address.
Transfers Outside the European Economic Area
Your personal data may be transferred outside the European Economic Area (EEA). When transferring data to non-EEA countries that do not provide the same level of data protection, we implement appropriate safeguards to ensure adequate protection.
Your Rights and Choices
You have the right to:
- Choose how you wish to be contacted (email, phone, social media, etc.).
- Request information on the data we process.
- Request corrections or updates to inaccurate data.
- Restrict processing of your personal data.
- Object to data processing for marketing purposes.
- Request data deletion where legally applicable.
- File a complaint with the data protection authority.
For any inquiries, you may contact the Croatian Data Protection Agency (http://www.azop.hr, [email protected]).